Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
File: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft (raw, json)
Hash identifier: eDDHMbwVBU23lbSjcwiXULg7Vo3RqqhNYqYvnhaS3yA=
Subject key identifier: 66:08:E4:5B:CC:6F:3B:CB:F4:32:37:F8:7D:C4:54:8E:0F:83:BE:08
Authority key identifier: 49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48
Certificate issuer: /CN=491758773a99e771b90ca9bb22f7fcadbfb63248
Certificate serial: 019EBDA30B86E263E1849BDFDA0302452EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
Manifest number: 01FC
Signing time: Fri 12 Jun 2026 21:00:39 +0000
Manifest this update: Fri 12 Jun 2026 21:00:39 +0000
Manifest next update: Sat 13 Jun 2026 21:00:39 +0000
Files and hashes: 1: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl (hash: Kw4HHSs0NicFS2huFoLdhLlexzSdbSCQIQqGNO30JRA=)
2: Z1MLI8tNzY6d4mU0MA4vsliznRQ.roa (hash: Hb0AvXt+7YtqdooEE/7Fg18JAVs1ie9AUIwS/98EVJs=)
3: rMUucMZwyHqVe68VNeoN6D-FuLA.asa (hash: nVyVPJj6zrsI6p0L4gt0DztUXIz3kVI0kWZGXavJ6p4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a3:0b:86:e2:63:e1:84:9b:df:da:03:02:45:2e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491758773a99e771b90ca9bb22f7fcadbfb63248
Validity
Not Before: Jun 12 21:00:39 2026 GMT
Not After : Jun 13 21:00:39 2026 GMT
Subject: CN=6608e45bcc6f3bcbf43237f87dc4548e0f83be08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:29:61:7b:14:73:a0:94:5e:b0:26:7f:6b:
ba:1b:a4:dc:16:f7:fa:40:1e:eb:83:c6:07:6e:75:
44:bd:a2:77:d4:26:ce:95:44:b3:b1:77:c0:65:a2:
ed:95:ac:07:86:d8:bc:ba:35:ea:5c:b3:3c:f9:db:
36:03:f0:42:ed:18:9f:e4:a2:53:a6:7b:8c:6a:a7:
0d:1d:95:68:50:74:e7:45:d5:74:e1:11:d9:58:8a:
31:e2:64:b5:55:ac:2b:3b:75:e3:4b:b6:32:be:74:
17:43:39:13:cc:85:9a:af:d5:de:e2:df:ea:26:26:
54:73:12:89:13:76:a0:6f:a2:73:89:23:06:c7:ee:
e8:3a:b5:24:8b:5e:95:d7:50:57:36:1f:85:38:df:
81:d4:9b:70:98:a3:57:e1:4a:bd:e7:04:54:ed:66:
dc:19:d3:ed:00:d2:4b:bb:9b:fc:64:e5:73:4f:6d:
33:6c:7f:77:d1:e8:31:c0:bb:31:cb:14:de:f1:21:
a5:3f:e9:cc:07:25:0e:79:53:bd:83:40:68:ec:e0:
73:02:17:86:09:02:00:a8:ee:f1:98:ca:cc:c2:bf:
e3:d9:04:d6:81:fd:6a:28:0f:9c:69:f7:be:f7:3b:
28:9a:e2:6c:37:d4:a4:e5:92:c7:4f:b4:59:56:00:
b6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:08:E4:5B:CC:6F:3B:CB:F4:32:37:F8:7D:C4:54:8E:0F:83:BE:08
X509v3 Authority Key Identifier:
keyid:49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:09:7f:25:23:5c:26:7a:e8:92:7f:31:16:f1:b9:ca:75:36:
b4:13:ed:aa:6e:fd:bf:d5:46:9f:30:5a:44:ba:a1:20:76:ba:
d6:84:79:cd:b1:5a:1f:98:1c:bf:35:2c:ed:01:e0:70:62:d8:
ea:ab:6b:26:3d:e3:5a:e8:87:bc:67:bc:1f:f2:ef:58:9e:aa:
22:f4:dd:04:72:10:b7:0b:88:e1:9a:6c:ec:0a:33:ba:35:98:
04:ca:cb:c5:01:e2:92:fe:f8:9b:48:4b:c0:e3:8d:f1:d3:25:
cf:0e:d5:b6:93:d6:46:01:e9:12:cd:c3:aa:ad:63:16:b9:6b:
8f:23:f8:2d:5a:33:5c:10:45:6f:6c:6d:aa:a9:6b:ec:98:81:
0c:1b:d9:ce:48:7f:89:65:e4:36:06:2b:a1:7b:a6:e4:ee:a2:
19:a0:c8:3e:93:4a:d2:7d:92:3f:44:43:7a:9b:20:53:fc:98:
31:3e:74:3e:7b:e5:87:dd:f4:3d:b1:e4:bb:5e:ef:c7:3c:23:
6a:5f:b4:15:de:6e:b0:80:16:9c:eb:10:4d:ee:09:35:eb:24:
8b:a5:7c:b5:05:f0:d6:0a:71:13:41:7a:96:a4:19:d4:5d:55:
77:05:d2:9a:19:a5:87:63:d1:3d:90:9b:9f:9f:44:c0:9c:c3:
9d:ea:74:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:28:54 2026 by rpki-client